There are a number of organisations who score the reputation of hosts on the Internet, security products then quiz this source of information and apply this knowledge to source and destination addresses as well as other content which is detected on the networks which they are monitoring
Geolocation
file reputation
website reputation
email reputation
network address reputation